loading-usd
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a documentation guide for official NVIDIA ovstage APIs. It provides instructions on loading Universal Scene Description (USD) data from files, URLs, or strings into an ovstage instance.
- [EXTERNAL_DOWNLOADS]: The documentation mentions the ability to load USD content from remote URLs using ovstage_population_open_usd_from_file. This is a documented feature of the NVIDIA Omniverse platform for asset retrieval and does not involve unauthorized code execution.
- [PROMPT_INJECTION]: The skill defines an ingestion surface for external data (USD files and USDA strings) which could potentially be used for indirect prompt injection. 1. Ingestion points: USD source paths, URLs, and inline USDA strings (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Prim querying via usd-path filters and structural edits propagation (SKILL.md). 4. Sanitization: Absent. The risk is considered low as it is inherent to the data processing function of the API.
Audit Metadata